Improper Input Validation in Apache Karaf

2022-05-1401:42:28

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

CPENameOperatorVersion
org.apache.karaf:apache-karafeq3.0.6
org.apache.karaf:apache-karafeq3.0.3
org.apache.karaf:apache-karafeq2.1.6
org.apache.karaf:apache-karafeq2.2.5
org.apache.karaf:apache-karafeq2.3.4
org.apache.karaf:apache-karafeq2.3.9
org.apache.karaf:apache-karafeq3.0.10
org.apache.karaf:apache-karafeq4.0.8
org.apache.karaf:apache-karafeq4.0.0.M2
org.apache.karaf:apache-karafeq2.2.1

Name	Operator	Version
org.apache.karaf:apache-karaf	eq	3.0.6
org.apache.karaf:apache-karaf	eq	3.0.3
org.apache.karaf:apache-karaf	eq	2.1.6
org.apache.karaf:apache-karaf	eq	2.2.5
org.apache.karaf:apache-karaf	eq	2.3.4
org.apache.karaf:apache-karaf	eq	2.3.9
org.apache.karaf:apache-karaf	eq	3.0.10
org.apache.karaf:apache-karaf	eq	4.0.8
org.apache.karaf:apache-karaf	eq	4.0.0.M2
org.apache.karaf:apache-karaf	eq	2.2.1